Pentest-Tools.com
Operator: PENTESTTOOLS S.A., Romania
Platform for subdomain and infrastructure research, authorised vulnerability scans and penetration tests.
Technical Infrastructure
Product
Pentest-Tools.com: web platform for technical research, vulnerability scans and penetration tests.
Availability and source date
Active
As of: 16 October 2026.
No functionality test has been performed.
Use in OSINT research
Finds subdomains and technical infrastructure for a domain. Active checks contact the target system and require appropriate authorisation.
Queries
| Input | Result | Result type |
|---|---|---|
| Domain / website | Subdomains from stored data, DNS, certificates and other sources. Active queries may also be used, depending on the scan type. | Retrieved |
| IP address | Open TCP/UDP ports, accessible services and detected operating systems, according to the provider. | Technical check according to provider |
| URL | Detected web technologies and indications of application vulnerabilities, according to the provider. | Technical check according to provider |
Features
- Finds subdomains and associated IP addresses.
- Identifies web technologies and virtual hosts.
- Checks for open ports and known vulnerabilities.
- Schedules recurring scans and reports changes.
- Exports findings and reports.
- Integrates APIs, MCP and AI assistants.
Categories
- Technical Infrastructure
- DNS
- Internet scanning
Coverage
Dataset
Combines technical queries with cached subdomains, DNS, certificate and external data sources.
Access
Installation and deployment
Website · Locally installable
Web platform with an optional local Python MCP client requiring Python 3.10 or later. The client accesses the account; it does not replace a dedicated scanning server.
Requirements
Some limited tools are available without an account. An account is required for saved work, trial access and subscriptions. API/MCP access requires a suitable paid plan.
Export
Reports in PDF, DOCX, HTML, JSON, CSV and XLSX; availability depends on the plan.
Provider
PENTESTTOOLS S.A.
Country of establishment
Romania
Interfaces
API
Available. REST API for targets, scans, findings and reports; included in paid plans.
MCP
Available. Official remote MCP or local Python MCP client; an API key and paid plan are required.
AI agents
Available. MCP integration for compatible AI clients.
Usage note
Security tests may be conducted only with the necessary authorisation; the provider may request proof.
Legal note
Limitations
- Many features send requests to the target system and are not purely passive research.
- The free version is limited; scan scope and reporting features depend on the plan.
- Discovered subdomains do not in themselves establish a vulnerability.
Guides and practical reports
Official · Subdomain Finder
Pentest-Tools.com · EN
Explains data sources and the differences between Light, Deep and Custom Scan.